chadtmiller.com
+19
CHANGELOG.md
+19
CHANGELOG.md
···
6
6
7
7
## [Unreleased]
8
8
9
+
## [0.2.0] - 2026-01-07
10
+
11
+
### Added
12
+
13
+
- **OAuth 2.0 authorization server** with full AT Protocol support
14
+
- Discovery endpoints (AS metadata, protected resource, JWKS)
15
+
- Pushed Authorization Requests (PAR)
16
+
- Authorization endpoint with dark-themed consent UI
17
+
- Token endpoint (authorization_code + refresh_token grants)
18
+
- Token revocation (RFC 7009)
19
+
- DPoP proof validation and token binding
20
+
- PKCE with S256 code challenge
21
+
- Client metadata fetching and validation
22
+
- Loopback client support for development
23
+
- DPoP JTI tracking to prevent replay attacks
24
+
- Comprehensive OAuth e2e tests
25
+
9
26
### Changed
10
27
11
28
- **BREAKING:** Normalized SQL schema to snake_case convention
12
29
- Tables: `blob` → `blobs`, `record_blob` → `record_blobs`
13
30
- Columns: `mimeType` → `mime_type`, `createdAt` → `created_at`, `blobCid` → `blob_cid`, `recordUri` → `record_uri`
14
31
- Existing Durable Objects require storage reset
32
+
- Consolidated error responses to use `errorResponse` helper
33
+
- Moved OAuth types to TYPES & CONSTANTS section
15
34
16
35
## [0.1.0] - 2025-01-07
17
36